The statistic matters because it highlights the alarming fact that even though organizations had cyber insurance policies, they were still vulnerable to ransomware attacks. This suggests that simply having insurance coverage is not enough to protect against cyber threats. Organizations need to bolster their cybersecurity measures to effectively mitigate the risk of being targeted by ransomware attacks.